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REMARKS 

Claims 1-34 are currently pending in the application. Reconsideration and allowance of the 
pending claims are respectfully requested in light of the foregoing amendments and the following 
remarks. 

Rejections Under 35 U.S.C. § 112 

Claims 5, 19, and 29 stand rejected under 35 U.S.C. § 1 12, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter that Applicants regard as the 
invention. In response, Applicants have amended the claims to change "module may create" to "module 
creates", thereby obviating the indefiniteness problem. Accordingly, Applicants respectfully request that 
the rejection be withdrawn. 

Rejections Under 35 U.S.C. § 102 

Claims 1-10, 12-13, 15-23, and 25-34 stand rejected under 35 U.S.C. § 102(b) as being 
unpatentable over U.S. Patent Publication No. 2002/0091798 to Joshi et al. (hereinafter "Joshi"). 
Applicants respectfully traverse the rejection for the following reasons. 

The PTO provides in MPEP § 213 1 that "[t]o anticipate a claim, the reference must teach every 
element of the claim . . . ." With regard to independent claims 1,16, and 26, Applicants submit that Joshi 
fails to teach every element of those claims. 

In particular, Joshi fails to teach at least "an information sharing module for creating a transitory 
link to the confidential information in response to a user being authorized to access the confidential 
information" and "a transitory link maintenance module for maintaining the transitory link and 
selectively removing the transitory link from the system" as recited in independent claim 1 . 

The Examiner cites paragraph 0124 of Joshi as teaching the "information sharing module" 
element. The cited passage of Joshi is reproduced below in its entirety for ease of reference. 

[0124] Event manager 514 calls redirection event handler 504, resource protected event 
handler 508, authentication event handler 512, or authorization event handler 516 to 
perform redirection, a resource protected method, an authentication method, or an 
authorization method (all further described herein), respectively. Redirection event 
handler 504 redirects browser 12 or 14 in response to redirection events initiated by 
Access Server 34 or other components of Web Gate 28. Resource protected event 
handler 508 performs steps in a method for determining whether a requested resource 
falls protected within a policy domain. Authentication even/ handler 512 performs steps 
in a method for authenticating a user of browser 12 or 14 upon a finding that a 
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requested resource is protected. Authorization event handler 516 performs steps in a 
method for determining whether a user of browser 12 or 14 is authorized to access a 
requested resource upon a successful authentication or receipt of a valid authentication 
cookie, further described herein. Sync record table 518 identifies all existing 
synchronization records not yet processed by Web Gate 28 as further described herein. 

Accordingly, while paragraph 0124 of Joshi teaches determining whether a user is authorized to 
access a particular resource, such as a database, the passage is totally devoid of any teaching of '' creating 
a transitory link to . . . confidential information [stored in the database] in response to a user being 
authorized to access the confidential information", as required by claim 1. 

Additionally, the Examiner cites paragraph 0148 of Joshi as teaching the "transitory link 
maintenance module" element. The cited passage of Joshi is reproduced below in its entirety for ease of 
reference. 

[ 0148] Once authenticated, a user can explicitly log out, causing authentication cookies 
cached (or otherwise stored) by the user's browser to be destroyed or become invalid. 
Authentication cookies can also be set by an administrator to be destroyed after a 
maximum idle time has elapsed between requests to resources protected in accordance 
with the present invention. 

Paragraph 0148 is devoid of any teaching or suggestion of "selectively removing the transitory 
link from the system" as required by claim 1, thereby to prevent the user from further access to the 
confidential information. 

In view of the foregoing, it is apparent that Joshi fails to anticipate claim 1 for failure to teach 
every element thereof. Claims 16 and 26 include limitations similar to those of claim 1 and are therefore 
also not anticipated by Joshi. Claims 2-10, 12, 13, 15, 17-23, 25, and 27-34 depend from and further 
limit claims 1,16, and 26 and are therefore also not anticipated by Joshi. 

Rejections Under 35 U.S.C. § 103 

Claims 11, 14, and 24 stand rejected under 35 U.S.C. § 103 as being unpatentable over Joshi in 
view of Official Notice. In response, Applicants submit that, because claims 11, 14, and 24 depend from 
and further limit claims 1 and 16, the claims are allowable over the cited references for at least the same 
reasons set forth above with reference to claims 1 and 16. Accordingly, Applicants respectfully request 
that the rejection be withdrawn. 
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Conclusions 

For at least the reasons set forth in detail above, all of the pending claims are now deemed to be 
in condition for allowance. Accordingly, Applicants respectfully request that the Examiner withdraw the 
pending rejections and issue a formal notice of allowance. 



Respectfully submitted, 
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